Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
19 Nov 2021	Working Capital Management España, S.L.Working Capital Management España, S.L. was fined by the AEPD 40,000 EUR for unlawfully processing personal data. The company included an individual's data in a credit information system without a valid contract, in connection with an identity theft case.	ES	AEPD	GDPR	€40,000	↗
21 Jul 2022	WUNSCHURLAUB S.L.WUNSCHURLAUB S.L. was fined by the AEPD 3,000 EUR for storing user passwords in plain text and sending them by email without encryption. The authority found this breached GDPR Article 32 on appropriate security measures.	ES	AEPD	GDPR	€3,000	↗
10 Jan 2026	NAROBESA INV, S.L.NAROBESA INV, S.L. was fined 1,000 EUR by the AEPD for unlawfully accessing a job applicant's credit information without consent during recruitment. The conduct breached data protection rules and occurred in the hiring process.	ES	AEPD	GDPR	€1,000	↗
07 Jun 2012	HOTEL REY DON SANCHO S.A.HOTEL REY DON SANCHO S.A. was fined EUR 30,001 by the AEPD for continuing to send unsolicited commercial emails despite a request for data cancellation. The authority found a breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
01 Jan 2013	LIBERBANK, S.A.LIBERBANK, S.A. was fined 1,200 EUR by the AEPD for sending commercial emails without prior consent from recipients. The authority found this to be a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,200	↗
14 Jun 2023	B.B.B.The entity was fined EUR 300 by the AEPD for installing a camera on the exterior facade of a building, aimed at public space, without the required administrative authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€300	↗
01 Jan 2022	ADADE BURGOS, S.L.ADADE BURGOS, S.L. was fined by the AEPD EUR 5,000 for improper use of personal data. The company informed clients about an employee's disciplinary dismissal, which breached data protection rules.	ES	AEPD	GDPR	€5,000	↗
03 Mar 2022	A.A.A.The entity was fined for operating a video surveillance system with cameras directed toward public areas without proper signage. This breached data protection rules and the information obligations owed to individuals being recorded.	ES	AEPD	GDPR	€600	↗
21 May 2015	BONANZA DIGITAL SERVICES, S.L.BONANZA DIGITAL SERVICES, S.L. was fined EUR 35,000 by the AEPD for sending 20 unsolicited advertising SMS messages without prior consent. The company also failed to provide an opt-out mechanism, breaching the LSSI.	ES	AEPD	ePrivacy	€35,000	↗
12 Aug 2021	NATURAL LOGISTICS, S.L.NATURAL LOGISTICS, S.L. was fined by the AEPD EUR 3,000 for sending unsolicited commercial emails despite the recipient's objection. This breached Article 21 of the LSSI on marketing communications without consent.	ES	AEPD	ePrivacy	€3,000	↗
19 Oct 2010	BUONGIORNO MARKETING SERVICES ESPAÑA S.L.U.BUONGIORNO MARKETING SERVICES ESPAÑA S.L.U. was fined by the AEPD for sending unsolicited commercial SMS messages. The conduct breached Article 21 of the LSSI, which governs marketing communications without prior consent.	ES	AEPD	ePrivacy	€1,200	↗
02 Apr 2021	PAGAMASTARDE, S.L.PAGAMASTARDE, S.L. was fined EUR 5,000 by the AEPD for sending advertising emails after a request for data cancellation had already been confirmed as processed. The authority treated this as a breach of data protection rules.	ES	AEPD	ePrivacy	€5,000	↗
17 Nov 2022	NUEVAS TECNOLOGIAS MEDITERRANEO, S.L.NUEVAS TECNOLOGIAS MEDITERRANEO, S.L. was fined by the AEPD EUR 800 for sending unsolicited advertising emails without prior consent. The case concerned a breach of Article 21 of the LSSI and unlawful direct marketing.	ES	AEPD	ePrivacy	€800	↗
01 Jan 2014	ESTABLIMENTS MIRÓ, S.L.ESTABLIMENTS MIRÓ, S.L. was fined by the AEPD EUR 1,000 for sending unauthorized advertising text messages to the complainant's mobile phone. The messages were sent after the data subject had requested cancellation of their data.	ES	AEPD	ePrivacy	€1,000	↗
01 Jan 2019	LA ROCA NETWORKS, S.L.LA ROCA NETWORKS, S.L. was fined by the AEPD 2,500 EUR for sending unsolicited commercial emails without proper consent. The conduct breached Article 21 of the LSSI, which governs electronic marketing communications.	ES	AEPD	ePrivacy	€2,500	↗
14 Jul 2023	GLOBAL TELECOMUNICACIONES INTERRECARGAS, S.L.The entity was fined 1,000 EUR by the AEPD for sending an advertising SMS without the recipient’s prior consent. This constituted a breach of Article 21 of the LSSI on unsolicited commercial communications.	ES	AEPD	ePrivacy	€1,000	↗
01 Jan 2021	ORANGE ESPAGNE, S.A.U.ORANGE ESPAGNE, S.A.U. was fined 100,000 EUR by the AEPD for requiring customers to submit photographs of both sides of their ID cards as a condition for package delivery. The authority found that this practice breached data protection principles.	ES	AEPD	GDPR	€100,000	↗
01 Jan 2023	INMARAN ASESORES S.L.INMARAN ASESORES S.L. was fined by the AEPD in the amount of 2,000 EUR for failing to comply with a data protection authority resolution. The company did not implement the required measures to inform data subjects under Article 13 GDPR.	ES	AEPD	GDPR	€2,000	↗
16 Apr 2024	ARRENDAMIENTOS DEUDORES, S.L.ARRENDAMIENTOS DEUDORES, S.L. accessed personal data in the ASNEF file without proper authorization. The AEPD found a breach of Article 6(1) GDPR and imposed a fine of EUR 2,000.	ES	AEPD	GDPR	€2,000	↗
24 Jun 2025	PROCONO SAPROCONO SA was fined EUR 300,000 by the AEPD for a data breach. The incident exposed customer data on the internet, including names, addresses, email addresses, and possibly bank account details.	ES	AEPD	GDPR	€300,000	↗

Fine Tracker.